ITDS 6 questions - hiding suffixes

[Siegfried Hanisch IBM]

Hi

customer wants to make the non-user-defined suffixes invisible to
anonymous users, e.g. he does not want to have anonymous clients read
his cn=localhost and cn=monitor and cn=schema etc. entries, but only the
user-defined suffixes. Is this possible?
He does not want to disallow anonymous requests at all.

Siggi

[jmc...@us.ibm.com]

For suffixes in the database, you can set access control to allow only
authenticated users access - and much more.

For cn=schema and cn=monitor, the only built in "switch" I am aware of is
to disable all anonymous access. However, I believe a server pre-op
search plugin could tell if the client was anonymous and reject such
searches. There are other entries below cn=monitor that are restricted to
admin only.

John McMeeking